Remote GRC Analyst – Risk & Compliance Lead

RxBenefits, Inc.; Pennsylvania; Remote; USD 81,000 - 101,000; Full time

Benefits offered by this job

Remote-first work environment

Competitive benefits package

Tuition Reimbursement

Job summary

RxBenefits, Inc. is seeking a GRC Analyst to coordinate corporate compliance initiatives and work with security and compliance teams to implement RxBenefits' compliance vision.

You will identify assets, document controls, perform risk assessments, and provide reports to executives. The role focuses on audits, third-party assessments, and policy development in a remote-first environment.

Qualifications

• Bachelor’s degree or relevant equivalent experience.
• 3+ years of Audit, Risk or Compliance experience.
• 3+ years of experience with HIPAA regulatory controls, SSAE, SOC1 and SOC2.
• Ability to juggle multiple work efforts and to quickly change direction.
• Sound organizational, analytical, oral, and written communication skills – ability to influence management and lead change.
• Self-starter, desire to learn, able to teach others, high energy, positive attitude.

Responsibilities

• Coordinate and independently execute corporate compliance initiatives with security and compliance teams.
• Identify high-value assets and their threats to support risk mitigation.
• Document and maintain enterprise processes to reduce security risk and mature controls.
• Perform routine or ad-hoc security risk assessments as needed.
• Maintain the GRC platform to document controls and risk information.
• Produce periodic risk reports for executives on program health.
• Assist with internal and external audits and responses.
• Evaluate impact of control deficiencies and drive business actions.
• Engage with RxBenefits clients for security questionnaires and audits.
• Stay current on audit and compliance trends.
• Manage third-party vendor assessments and compliance.
• Assist with policy, procedure, and standard development.

Skills

HIPAA controls

SSAE SOC1 SOC2

Audit & risk management

multitasking & attention to detail

communication & stakeholder mgmt

self-starter & teaching

Education

Bachelor’s degree or relevant equivalent experience

Job description

RxBenefits, Inc. is seeking a GRC Analyst to coordinate corporate compliance initiatives and work with security and compliance teams to implement RxBenefits' compliance vision.

You will identify assets, document controls, perform risk assessments, and provide reports to executives. The role focuses on audits, third-party assessments, and policy development in a remote-first environment.